Two-step verification (second factor)
All plans
How to turn on the emailed security code for logging in to your account, who is asked for it and how to change it.
What it is for
Two-step verification (or two-factor authentication) adds a barrier to your account: as well as the email and password, Recipok asks for a security code when someone logs in from a connection they haven’t used before. If someone gets hold of a password from your team, they won’t be able to log in without that code.
The account owner turns it on and it applies to all users in the business. It is recommended if several people log in from outside the bakery or if you keep sensitive customer and supplier data in Recipok.
Before you start
- Only the administrator who owns the account sees the Security tab. A manager cannot turn it on.
- Make sure your email and the other administrators’ email work: that is where the code will arrive.
- Let your team know: the next time they log in from a new place, they will be asked for a code.
Turning it on
Open the Security tab
User menu › Configuration › Security tab.
Turn on the second factor
In the Two-factor authentication card, set the switch to Enabled. You will see “Two-factor authentication enabled. A code was sent to your email.”
Keep the code
You receive a numeric code by email, and so do the other administrators. It is the same for the whole business until you change it.
The administrator receives a code via email required to log in.
2To generate a new code, disable and enable this option again. The code will be sent to all company administrators.
- 1Enabled: from now on, anyone logging in from a new connection is asked for the code.
- 2New code: turn the switch off and on again.
How you log in with verification turned on
- The user logs in with their email and password, as usual.
- If they log in from a new connection (another computer, another network, their phone outside the bakery), Recipok shows them a screen to enter the code, with the Enter confirmation code field.
- At the same time, the code is sent again to the owner’s email. The user types it in and logs in.
- They are not asked again from that connection, unless verification is turned off or they change network.
Turning it off or changing the code
- Turn off: set the switch to Disabled. The code is no longer requested and the validated connections are forgotten.
- Change the code: turn it off and on again. The new code is sent to the administrators.
The code is sent to the owner’s email every time someone logs in from a new connection. If your employees often log in from different networks, agree with them how you will pass it on. If you can’t log in, see I can’t log in to my account.
Combine verification with one user per person and the right role for each. See Users and roles.